| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 13.11.0, ≤ 13.11.7≥ 13.12.0, ≤ 13.12.8≥ 14.0.0, ≤ 14.0.4 |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.11 before 13.11.7, all versions starting from 13.12 before 13.12.8, and all versions starting from 14.0 before 14.0.4. A specially crafted design image allowed attackers to read arbitrary files on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free